Knowledge Management · Beta
Atlan
API integration
Ship Knowledge Management features without building the integration. Full Atlan API access via Proxy and 10+ MCP-ready tools for AI agents — extend models and mappings to fit your product.
Built for specific customer use cases. Issues are resolved quickly.
Talk to usUse Cases
Why integrate with Atlan
Common scenarios for SaaS companies building Atlan integrations for their customers.
Automate Atlan user lifecycle from your IAM or HRIS product
Identity and workforce platforms can provision, update, and deprovision Atlan users the moment a hire, role change, or offboarding event occurs in the source system. This eliminates manual catalog admin work and keeps data access aligned with employment status.
Sync IdP groups into Atlan for governed data access
Security and SSO platforms can push group mappings from Okta, Entra, or other IdPs directly into Atlan so federated groups always reflect the source of truth. Customers get zero-touch RBAC across their data catalog without maintaining a second directory.
Mirror team structures into Atlan workspace groups
Collaboration, project management, and team topology tools can replicate their internal team hierarchies as Atlan groups and memberships. This lets end users discover and govern data along the same organizational lines they already work in.
Enforce access certifications from your GRC or audit platform
Compliance tools can codify access reviews by programmatically changing Atlan user roles and group memberships when a certification is approved or revoked. Auditors get a clean, automated trail of who can access the catalog and why.
Bootstrap Atlan workspaces for new customer tenants
Platforms that stand up data environments for their customers can auto-create the corresponding Atlan users, roles, and groups as part of tenant provisioning. New workspaces come online fully governed on day one.
What You Can Build
Ship these features with Truto + Atlan
Concrete product features your team can ship faster by leveraging Truto’s Atlan integration instead of building from scratch.
Just-in-time Atlan user provisioning
Create Atlan users on demand with the correct workspace role ($admin, $member, or $guest) whenever a user is granted access in your product.
Bidirectional group membership sync
Keep group rosters in lockstep by adding users to Atlan groups and removing them when your source system changes, using list, add, and remove operations.
SSO group mapping manager
Ship a UI where admins can create, list, update, and delete Atlan SSO group mappings so IdP groups translate cleanly into Atlan federated groups.
Role-based access automation
Trigger role changes in Atlan automatically when a user is promoted, certified, or moved between departments in your platform.
Group and membership explorer
Embed a live view of Atlan groups, their members, and each user's group affiliations so your customers can audit catalog access without leaving your product.
Bulk workspace bootstrap
Provision an initial set of Atlan users, groups, and SSO mappings as part of your onboarding flow so new customers land in a governed state.
SuperAI
Atlan AI agent tools
Comprehensive AI agent toolset with fine-grained control. Integrates with MCP clients like Cursor and Claude, or frameworks like LangChain.
create_a_atlan_group
Create a new group in Atlan by wrapping group details in a group object with attributes (alias and isDefault as arrays of strings) and an internal name. Returns: group. Required: group.attributes.alias, group.name. The internal name must be unique, all lowercase, and include only alphanumeric characters and the underscore (_).
list_all_atlan_groups
List all groups in Atlan. Returns group records including id, path, name, attributes (alias, isDefault, description), roles, and createdAt. Supports sorting by a property such as createdAt and column projection to restrict the fields returned.
atlan_groups_get_by_name
Retrieve groups in Atlan by name using a contains (ilike) search on the alias field. Returns a list of matching group records including id, path, name, attributes (alias, isDefault, description), roles, and createdAt. Required: filter.
atlan_groups_get_members
List users that are members of an Atlan group by providing the group's GUID. Returns each member user's id, username, and email. Required: group_id.
update_a_atlan_group_by_id
Update an Atlan group's attributes such as description and default group status. Returns: id, path, attributes. Required: id, path. The path must be the internal group name prefixed with /, and all attribute values are arrays of strings.
atlan_groups_remove_users
Remove one or more users from an Atlan group by specifying their user GUIDs. Returns an empty 204 response on success. Required: group_id, users.
create_a_atlan_user
Invite a user to Atlan by wrapping user details in a users array. Returns an empty 204 response on success. Required: users (each with email, role, and roleId). Role must be one of $admin, $member, or $guest. Look up role GUIDs via GET /api/service/roles.
list_all_atlan_users
List all users in Atlan with support for filtering by username or email. Returns: id, username, email. Default sort is by username.
atlan_users_get_groups
Retrieve the groups a user is a member of in Atlan. Returns: id, name, path, attributes. Required: user_id.
atlan_users_add_to_groups
Add a user to one or more groups in Atlan. Returns an empty 204 response on success. Required: user_id, groups.
atlan_users_change_role
Change the workspace role of a user in Atlan. Returns an empty 204 response on success. Required: user_id, roleId. Look up role GUIDs via GET /api/service/roles.
list_all_atlan_roles
List all workspace roles in Atlan. Returns: id, name. The id is the role GUID needed for user creation and role changes. No caller-supplied parameters beyond pagination.
create_a_atlan_sso_group_mapping
Create a new SSO group mapping in Atlan that links an identity-provider group to an Atlan group. Returns: identityProviderAlias, identityProviderMapper, id, name, config. Required: sso_alias.
get_single_atlan_sso_group_mapping_by_id
Get a single SSO group mapping in Atlan by its map identifier. Returns: identityProviderAlias, identityProviderMapper, id, name, config. Required: sso_alias, id.
list_all_atlan_sso_group_mappings
List all SSO group mappings for a given identity provider in Atlan. Returns: identityProviderAlias, identityProviderMapper, id, name, config. Required: sso_alias.
update_a_atlan_sso_group_mapping_by_id
Update an existing SSO group mapping in Atlan, typically to change the mapped SSO group name. Returns: identityProviderAlias, identityProviderMapper, id, name, config. Required: sso_alias, id.
delete_a_atlan_sso_group_mapping_by_id
Delete an SSO group mapping in Atlan by its map identifier. Returns an empty 204 response on success. Required: sso_alias, id.
Why Truto
Why use Truto’s MCP server for Atlan
Other MCP servers give you a static tool list for one app. Truto gives you a managed, multi-tenant MCP infrastructure across 650+ integrations.
Auto-generated, always up to date
Tools are dynamically generated from curated documentation — not hand-coded. As integrations evolve, tools stay current without manual maintenance.
Fine-grained access control
Scope each MCP server to read-only, write-only, specific methods, or tagged tool groups. Expose only what your AI agent needs — nothing more.
Multi-tenant by design
Each MCP server is scoped to a single connected account with its own credentials. The URL itself is the auth token — no shared secrets, no credential leaking across tenants.
Works with every MCP client
Standard JSON-RPC 2.0 protocol. Paste the URL into Claude, ChatGPT, Cursor, or any MCP-compatible agent framework — tools are discovered automatically.
Built-in auth, rate limits, and error handling
Tool calls execute through Truto’s proxy layer with automatic OAuth refresh, rate-limit handling, and normalized error responses. No raw API plumbing in your agent.
Expiring and auditable servers
Create time-limited MCP servers for contractors or automated workflows. Optional dual-auth requires both the URL and a Truto API token for high-security environments.
How It Works
From zero to integrated
Go live with Atlan in under an hour. No boilerplate, no maintenance burden.
Link your customer’s Atlan account
Use Truto’s frontend SDK to connect your customer’s Atlan account. We handle all OAuth and API key flows — you don’t need to create the OAuth app.
We handle authentication
Don’t spend time refreshing access tokens or figuring out secure storage. We handle it and inject credentials into every API request.
Call our API, we call Atlan
Truto’s Proxy API is a 1-to-1 mapping of the Atlan API. You call us, we call Atlan, and pass the response back in the same cycle.
Unified response format
Every response follows a single format across all integrations. We translate Atlan’s pagination into unified cursor-based pagination. Data is always in the result attribute.
FAQs
Common questions about Atlan on Truto
Authentication, rate limits, data freshness, and everything else you need to know before you integrate.
What Atlan capabilities are available through Truto today?
The current Atlan integration focuses on Identity & Access Management: managing users (create, list, change role), groups (create, list, get by name, update, list members, remove users), user-to-group associations, roles, and SSO group mappings (create, read, update, delete).
How does authentication with Atlan work?
Truto handles the credential exchange and token lifecycle for Atlan on your behalf, so your end users connect their Atlan workspace once and your product calls the tools without you managing secrets, refreshes, or workspace-specific auth quirks.
Can we assign workspace roles like admin, member, or guest when creating users?
Yes. The create_a_atlan_user and atlan_users_change_role tools support assigning and updating Atlan's standard workspace roles ($admin, $member, $guest), which you can retrieve via list_all_atlan_roles.
Does the integration support SSO / IdP federation workflows?
Yes. You can fully manage Atlan SSO group mappings through create, get, list, update, and delete tools, which is what most customers use to federate Okta, Entra, or other IdP groups into Atlan.
Are metadata, lineage, or asset-level operations supported?
Not in the current toolset. Today's integration is scoped to IAM and SSO governance. Asset, lineage, and metadata enrichment endpoints can be added on request — reach out to Truto and we'll expand coverage based on your use case.
How do we handle removing users from groups or offboarding?
Use atlan_groups_remove_users to detach users from specific groups as part of role changes or offboarding flows, typically triggered by events from your HRIS, IAM, or internal deprovisioning pipeline.
From the Blog
Atlan integration guides
Deep dives, architecture guides, and practical tutorials for building Atlan integrations.
Atlan
Get Atlan integrated into your app
Our team understands what it takes to make a Atlan integration successful. A short, crisp 30 minute call with folks who understand the problem.